CVE-2020-10997

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output

published April 27, 2020

CVSS
—
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONA_SCHEMA.xtrabackup_history table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00951 · 60.9th percentile
Published
2020-04-27T12:38Z
EPSS history
Timeline
  • 27 APR 12:38Z
    Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output
    cvelistv5